\n<\/p>\n
On Tuesday, education tech giant Instructure disclosed a data breach where hackers stole students\u2019 private information, including their names, personal email addresses, and messages sent between teachers and students.\u00a0<\/p>\n
Now, it appears hackers were able to compromise Instructure again \u2014 this time defacing several schools\u2019 login pages to the company\u2019s platform Canvas, which allows schools to manage coursework and assignments and communicate with students.\u00a0<\/p>\n
TechCrunch saw a message published by the cybercrime group ShinyHunters on the Canvas login pages of three separate schools. A review of the defaced portals shows that the hackers injected an HTML file that altered the login screens to display their message.<\/p>\n
The message says the hackers will publish the stolen data on May 12 if the company does not \u201cnegotiate a settlement.\u201d<\/p>\n
At the time of writing, Instructure\u2019s website appeared to be partially online, at times returning a \u201ctoo many requests\u201d error. The company\u2019s Canvas portal displayed a notice saying it was \u201ccurrently undergoing scheduled maintenance.\u201d<\/p>\n
Instructure did not immediately respond to TechCrunch\u2019s request for comment.<\/p>\n
ShinyHunters had previously claimed responsibility for the original hack, publicizing it on its leak site \u2014 a website hackers use to publish stolen data and pressure victims into paying ransoms \u2014 in an effort to extort Instructure into paying to keep the data from going public. This apparent new hack, along with the fact that hackers chose to notify TechCrunch about the defaced login pages, indicate that the hackers are trying to ramp up pressure on Instructure and its customers, hoping to force them to cave to the hackers\u2019 demands.\u00a0\u00a0<\/p>\n
It\u2019s unclear how the hackers were able to compromise the login pages. When asked, a member of ShinyHunters told TechCrunch that they couldn\u2019t comment on specifics, but said this is a second, separate breach.<\/p>\n
Following the original breach at Instructure, the hackers claimed to have stolen data from almost 9,000 schools around the world, with the stolen files allegedly containing information on 231 million people.\u00a0<\/p>\n
The group has compromised countless victims over the last couple of years, following the same financially motivated playbook: hack, publicize, and extort.\u00a0<\/p>\n<\/div>\n